feat: Athena Firewall

2026-08-05 16:15:49 +02:00
2 changed files with 9 additions and 0 deletions
@@ -10,6 +10,7 @@
    ./disks.nix
    ./hardware-configuration.nix
    ./environments.nix
+    ./network.nix
    # ./system.nix use docker here
  ];

@@ -0,0 +1,8 @@
+_: {
+  # Athena (local AI): allow LAN access to the Hermes web dashboard.
+  # Bound to 0.0.0.0:9119 in the athena docker stack; NixOS default-deny
+  # firewall otherwise blocks inbound connections from other devices.
+  networking.firewall.allowedTCPPorts = [
+    9119 # athena hermes dashboard
+  ];
+}